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didate selected from a combination list of a candidate name transmitted 
from a voting server (200) by voter terminals (100, 110, 140) and an 
encrypted candidate name, is transmitted to an encryption server (400) 
via a network. The encrypted candidate name is re-encrypted into en- 
crypted voting data by the encryption server (400) and the data is re- 
turned to the voter terminals (100, 110, 140). Among them, a valid 
encrypted voting data list is created so that voting is performed in the 
voting server (200) via the network and an anonymous decoding sys- 
tem (500) decrypts the encrypted voting data. 
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{^r-yzf A3) 0 /^200te, (p, q, g, Y)^|B^g204^|B^«(^5/ 

^A4) 0 £Lh^£t9, WfS^UTt^ 
[0061] 03— H|9^#mL-C, J£M#i»100, 110, 120, 130, 140, 150§rfe> 

fc^M^Wj^^Ki-^o 03-08te, ^ti^ti. i£H#rauoo, no, 

120, 130, 140, l50^<Dfam(RXf^nh<DUm^i®^<DfaMKmM1r%U 

[oo62] &mnmm^z>t, t*f-efe§tif(i, ^m^s^ioo, ho, 120, 130, 

140, 150<DV^ ^^^i«9^M^^^200^T^ir^i-^ o i(D£#, g^^^^l 
00, 110, 14075^(D^M-e»Bt^Mtf|g®^^ff U03, 1214, H7(D^^ 

^a5-d, ^#^120, 130, i5ofrb(D&mxfeW£%&mmmmM$:mm 

i~3(05, 06, 08(D^5/7A5-2) O ^200te, J£H#i»100, 110 

, 140^^(DBf^Mtt«^^^Sff -TZb, ^(DBf^b¥^203^J;i9. i~^T(D 
^t$#£vj3r<&Wff$R(p, q, g, Y)X»m^tir%Z.bK£oX(vj, E(vj))(Dy^h^ 
^£^(03, 04, m7(DXTy-7A6)^£mmm(p, q, g, Y)£(vj, E(vj))(Dy^h 
t^M^MlOO, 110, 14O^3gff-T§(03, 04, 07(D^5/^A7-1) O itft 

, &m&ffiMi2o, 130, i5ofrh<DW£%&mm m^M^m -tz>t, um^—^ 

200te,4»ff#g(p, q, g, Y)t^X<Di&ffi#&w<D})Xbb*&m%'i®Ml20, 13 
0, 15OtC^fi-§(05, 06, @80^^A7-2) O 

[0063] j^t, tlf-^©M f-eo^a^, i£M^*100, HO, 120, 130, 140, 

150^^lJ^r^K-r^o 
[0064] ^M#S^100{i, 03^-TJ;5^, (p, q, g, Y)b(vj, E (vj) ) (DV^hb^it 

^^Mi02^J;^vjoy^hd^^M#^vi^$RbTA> f 7-rs(^^7Aioo-i) 0 

^vx&m^Mioon,vi\mfoi-%v(vdb'£mmm(p, q, g, Y)b&m-%v— 

/^400^^|ffi-§(^5/7Al00-2) o ^kK, ^400{3, ^ffbfcE(vi)^ 
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^K§ff$ft(p, q, g, Y)b&ftm&¥&401\Z7<ftVXE{vi)&ft&m&fcUtE' (v 
i) Srff #1.(^5/^100-3) , E' (vi) &&m&fflMlOO\zMifrrz 

o-4) 0 tstm^mMioom. At>mmio2fc£vw^<DMffiftmimiDi 

SlJ^IIDi^m«fT^V^(^5/7 o A100-5). E' (vi)^mtiEi^— ^^300^^ffi-^> 
(^5/7°A100-6) o 

[0065] gBWfr?— ^300te, f"-x^J^|iE#^301^J;^Wb^M#^»^P fc 3fiS'J^- 
IIDi£-ID3g^I£304^A^U *f*S*t-5#ififlHSU^CIDiSr#5 (^y^AlOO 
-7) 0 fBJEIf— ^300^2, £*fc#®3031;:(E' (vi), CIDi) 

»mWEEf-^^300(D^ffl»«dk^^A^$^T, (E'(vi), CIDi) 

^^300<©*M^^Sek^^$tt^(^5/^°A100-8) o ^LT, 
SSE^w^300f*, (Ei, CIDi) = (E' (vi) , CIDi) bSBkb^UM^—^200icm 
ft -f 5 (^^^AlOO-9) o 

[0066] gSNftS^llOtt, El4^i-j;5^. (p, q, g, Y)£(vj, E (vj) ) W^bbZ^m 

^^®112^J;^vjOy^hd^^M#^vi^M^bTA^i-§(lE|4(D^^ 0 All 
O-l) o ^rbT, &JK#S&llOte, vifc#j£^3E(vi)^Mfi*#(p, q, g, Y)b& 
Bf^-f-w^410^^ffi-^(g|4(D^^ o A110-2) o Bf^w^410«, ^ff L 

7tE(vi)^W^( P , q, g, Y)i:SrSlif#^a411J!:A^LTE(vi)SrSSffiP# 

ffcUfcE' (vi) £f+J|L &Ty7Al 10-3) , E' (vi) ^It«*l lO^Mff ( 

^5/7 o aho-4) 0 #cm, jssi^Huaiori, mmftm4>&&3L8tii3\z:8mm 
(Dimtftmn+iuyibm&mwssmdibE' <yi)b&AXu (e' (vo, iiDO^i- 

5m^rtf^it^^^Sei$rff#L(^^A110-5), (E'(vi), IIDi) £Sei 
£&fB*E*P— ^300^ff-r5 (XTiS^Al 10-6) o 
[0067] »-/^300ji, ^<DffiMftm%1lkW£®L302iz£V), Seitf (E' (vi) , IIDi) K 

n\^xm%mu^md\\z.£V)^<t^isihtz.h<Dfr^ 

7)^&x&ti^ ir>mm^304KXoxnuiKMf^ir^mmm^cmi^m 

(^^A110-8) o Jfcfcl, MffiEi^ — ^300te\ *MS$£^&£j&^303 
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tCE' (vi) £CIDi£ME1J— /<300(Dm%m%y$mdkb&AJjLrC, (E' (vi), CIDi 

) iz.M~f-&mm.-y— ^3oo<D&mm^i??^w% sek^m^b (^t^^ai 10-9 

) % (Ei, CIDi) = (E' (vi) , CIDi) bSekb&W£y—'*200lZ.m^1r%> (XTyfAl 
10-10) o 

[0068] i£H#^120«:. El5^i-£5^ (p, q, g, Y) bvjWXhb&^m Z 

<Dm^mm2i m*sv ^vj^y^h^&ii^^L-c^u sm#«a^^©i2 

2^J;«9vj©y^hd^^M#^vi^iRLTA^i-§ (^y^A120-l) o ^LT^ 
Sf#*B*120tt,vifc^Hfj|#(p, q, g> Y)i^Bf^ffc^I£l24^A^U vi^Y^ 
J:*9Bf^bbfcE(vi)^#§(^^°A120-2) o tfc^ g3il#*fifefa20H\ ttfcggffl 
^|iE^123^J;«9^|iE^— ^^300^LT»im©«aittrt«iaU^IIDi©|RiE* 
ff &V > O^jy^A 120-3) % E (vi) %Mmy—/*300Kmitir% (^5/^120-4 

)o 

[0069] MEU— ^300E\ ^^|R|iE#S301l^5flWb^iKai#©l^rt^J^ 
IIDi£rID®ii^I£304^A^U *fH&i-«*ii»BU^CIDiS^5 0*7^:^120 
-5)„ Jfcfcl, ^300{3\ *ilM^^¥^303^(E(vi), CIDi)<Z>j|& 

i:^aEi^w?300<D^ffl|6HK«idkSrA^bT, (E(vi), CIDi) ^*H~5#jM 
Sek£r£j£L (^7^7°A1 20-6) , (Ei, CIDi) = (E (vi) , CIDi) bSekb&?& 

m-y—s<2oo\zmm~rz> (^^^°ai20-7) o 

[0070] ^M#S*i3o«, 06^i-j;5^ (p. q. g. Y)^vj(Dy^h^^fti-§^, 

2^J;«9vj(Dy^hd^^M#^vi^a^LTA^« 0*7^X7^130-1) 0 tVX®t 
M#*^130«, vi^|Sff#(p, q, g, Y)^^Bf^b^l34^A^U vi^YiC 
i«9Bf ^LfcE(vi)£#3C*7V7°A130-2) o ^^SM#«*130«, BM^m 
^^^133^M#i^m^rt^^IIDi^^ffl^lidii!E(vi)i!^A^ 
U (E(vi), IIDO^^i-^iia^rtfBjft^^/V^Sei^tf^E 0*7^77^130-3 
) , (E (vi) , IIDi) bSeib&mU^—^3001 l Z.m{tirZ> (^5/^°A130-4) o 
[0071] »-/^300(i, mM^m^U^3O2KX<0, Sei^ (E(vi) , IIDi) fcm, 
T^ffl^«di{^J;^lEL<f+^$tb^(D^^97)^|iEL(^^ o A130-5), 
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-a-te-C&ftti, ID*»#®304lcj;5nDi^JS^5#a«BiJ J ? : CIDiSr5t#-r5 ( 
^^A130-6) o ifcfclfBfliElJ-— >*300ri, *M»^^^303^E(vi) b 
CmikmUV—/*300<DW&mffl&mdk£&Aj]L,X. (E(vi), CIDi) fcSfr-rSfg 
liEi^ — /<300<D&m^^^i??/^%Sek$:Mt)ls&Tiy7'Al30-7), (Ei, CI 
Di) = (E (vi) , CIDi) tSekt^m-V—^200Kmmir^> (^^7°A130-8) 0 
[0072] SH#^140«. H7^-T£5^ (p, q, g, Y)£(vj, E (vj) ) (DV^ht^it 

sM40lcmmiTZ) (^5/^°A140-2) o #C^Bt^— ^440« N ^{f LfcE(vi) 

Httt(p, q, g, Y)t^nm^m4iKAtn.xK(vi)^nmm^rit^tLK' (vo 

^ff^L(^^°A140-3), E' (vi)^M#^^140^3Mffi-^ (^5/^°A140 
-4) 0 ^C^M#*^140«, *iiM^^^143^^M#i^*MMIi 

%\\+cir>im&mm%mdikE' (vi)t&A±)U (e'(vD, cido ^*h-s 

^T ? v ? ^/V^Sei^|+#L(^7"^7°A140-5). (Ei, CIDi) = (E' (vi) , CIDi) b 
Seib&l&my— ^200^{f (^5/^°A 140-6) 0 

[0073] i£M#S^i50J3:, 08^-r<£5^ (p, q, g, Y)tw}(DV^Yb^mt -TZb, m 

^mmi5i\z.^^xvj<Dv^h^M^Mi^xm^u &MmtA£)mm52K£ 
vvjm*hfrhmm^%vi&m$ivA£)irz> (^^aiso-Do ^lt&m^s 

7^150^, vi^^tffB(p, q, g, Y)^^Bf^b^l54^A^b-Cvi^Y{iJ:«9Bt 
-^^bfcE(vi)^#^(^5/7°A150-2) o &^&M##fiMcl50i3\ #aStW^ 

^m^m53K^mm<D^mmmm^cmitm^mm^mditK(wi)b^Ati 

U (E(vi), CIDi) CTi-^^ilS^V^/V^Sei^f+^L^^Al 50-3) 
, (Ei, CIDi) = (E(vi), CIDi)i:Seii:^Mi^^^200^^fi-§(^5/^ o A150 
-4) 0 

[0074] J^_h^, Mr- ^3£ff *-e(D^a-e$?§ 0 o^v>T, UMT^co^untn 

MBwm<DmMMtmmK^^x, m9&m\<^xtmirz> 0 

[0075] g^H^^200te, f&flEI?— /^300^£> (Ei, CIDi) bSekb^it 1~Z>k, 
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*fc§£lftiiE#®202lCj;«)SektfS(Ei, CIDi) ^i^ME^— ^300<DIEU/^ 

A9-1), ®tM7*— ^fE^^g204^(Ei, CIDi) ^Sek^^fE®:^^^^, ^"^i 
fSfy 5 — ^201 ^CIDi7)S^^^-efc§- ££rfe®rT3 (^y^AlO-l 
) 0 *fc. SUIT— ^200 SH#^140, 150d^(Ei, CIDi)i!Seii!^fti- 
&mW&m%1km^&202K£V)Sei&(Ei, CIDi)lcm-5»SI#i©jELV> 
S^B "CfcSrtSrflURb (^^^^A8-2) , 8F7 e —*'<—X201&tii#LX 
CIDitfSS»&;fvCV ^^Cim^J^^^ttfrTl v£v ^t^ilL Cxt> 
^A9-2). 19*7*— ^|B»3Se204 ^(Ei, CIDO^Sek^fE^rTS^fcl^ 
^ ttT*— ^201 ^CIDitf^If $r#--C&5- fcSrfEfirTS (^5/^°AlO-2 

)o 

[0076] &n&ffi#>%)tbtvft®., smv—^oo^ ®tm'r-?mmmm204iz.mm^ 

-t^X(DKi(D]}^ht, ^^A2^g^^^iX^A500^^fLfc:-fe5'^3^ID^ 
^E^m-^^^500^ffi-^(^^yAii) o E^m^>^A500^. -fey 
^^ID-C*gfe$tb^Mf*#(p, Q, g, Y)»^|iXt^S-5V^TEi(Dy^h^ 

, S^w^200^^bTyj<Dy^h^z^Sr5gfti-5(^7 l 5/^A13) o g^iJ— ^20 
« (^y^A14) 0 

[0077] *mmi&M<D%}%kK^^xmwirz>o 

[0078] ^HJfe^HR-Ctt, ^^—^200^^^100, 110, 140\ZLVfr%>fc&M?* 

um^mAstcm ^turnf— p&m^y— ^400, 410, 440^9 

£k^^fcLT&M1^-^20oraff1-3/c&, Bf^-^a:SHi^v^sf#«S* 

fabXh, &M(Dffl8S&$*)K>. &M&ftt£%.Z>o ^M#«*100, 12013 
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^ffc&M-T^^iEiJ-— ^^3oo-e^tEb,ia^rt^'J^^^#iS^WSfJ^^ 

[0079] fc:}3, ^300tet>£ofc it£LTf£KUh#\ Mft-ioti 

[oo8o] m2(Dmm^m» 

m^., ^mm<DM2<DmMftmic^^xmm&0mL,xmmir% o mioizmut 

Wfr&m^xT&te&^x^&m&ffiMioo, no, i4op%ttfrsetim-%*?—# 

ffr&3M£l04, 114, 14A%WtftZ>bbhfc, IfcSlIf— ^200<©B£^ffc#gfc203fc:ffc 
X.THl(D^^^206i!Ht^bfiEP^^iiE^207^^(t^ Bf^-f— ^400, 41 
O, 440^it§SBt^^401, 411, 441^ftx.T^^tL^2(D^m^4 
05, 415, 445£rl£H\ ££>i^ MmkU^701^m^^.mm^-—^700^M 

[0081] ^-e^KD^^206f*. 4;mmwL&A±)tu 'mKD^wf—z (mim^< 

bMl^miEW7*-?t&m±)1rZ>i><DXhZ> 0 
[0082] Jg2<«m^J£405, 415, 445te, 4^f# m&At)bU ^(DW^rf-? (H2 

^^7*—?)tm2(Dmmm"f— ^b^mti-r^ 

[0083] Bf^— ^fft&^I§:l04, 114, 144KJ\ <k!Sff Jgl^^— ^ W,!^ 

mmm?*—*. w,2(DW&rf-$, m2<Dmmmmr-^Rxf^<DUM^m^ 
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[0084] ^mmmtm^mmf-^-E (vo mmmmf 

[0085] f|l<D^^J£206, H2(D^^405, 415, 445, Hf-^— ^ffrr£^l£l04 

, 114, i44Rxfm^itumm^^207n^m^^y^^5oo\cMvxwn 

[0086] m<D&m^8L206te. 2HH§ftfft(p, q, g, Y) ^A^*!^ q*t»tf>SU£r£d 
t&mft&KMTf, mi^mr^iGr, Yr, r)iLT, 
(Gr, Yr, r) — (gr mod p, Yr mod p, r) 

^tfifLL-cm^u ^KDmmmmf— ^(Gd, d)^r, 

(Gd, d) = (g~d mod p, d)^rff-^Lrm^-r§o 
[0087] ^2(7)^^405, 415, 445«, 4»ft^(p, q, g, Y)&A£lt5tl&b, d^Wl 
<£>gL^s3rilt>\ H2(D^^— ^(Gs, Ys, s)tLt, 
(Gs, Ys, s) = (g~s mod p, Y s mod p, s) 

(Gu, u) = (g~u mod p, u) 

[0088] Bf^— *ffr£#l§:te, ff§l<«^— ^ (Gr, Yr, r) , fjHO^fiEl^— ^ (G 
d, d). Sf§2<£>^m^-*(Gs, Ys, s). 02O^mra^-^(Gu, u)^OTJtO 

E(vi) = (GrXGs mod p, viXYrXYs mod p) 

a=GuXGd mod p, 

c = HASH(p, q, g, Y, Gi, Vi, a), 

t — c X (r + s) +u + d mod q 

[ooso] v%^kmmT-?K£%umfe. ^imm^ku^207\z.xx> 

c = HASH(p, q, g, Y, Gi, Vi, a) 
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g tX Gi" {— c} = a mod p 
[0090] &&&m^®L701tt&&7 ! —# (Gr, Yr, r) tMWim'f—^ (Gd, d) £fcoV > 

-c.^ntffgcp, q, g, Y)frhiE\^<\^^fitdk(Dfr}£?fr%mfctz>o m&&s§r 

tt4*BBf*#(p, q, g, Y)fc£|fc?*-*(Gr, Yr, r) ^Jfe^^-* (Gd, d)^A 
tltU 

Gr=G"r mod p, 

Yr= Y r mod p, 

Gd=Y"d mod p 

[0091] m^, ^mmftm<Dm&m^&m^TJ*<Dmm^\^xmmir% 0 mu—mi 

3tt, -ttl/^U i£M#^100, 110, 140^M(IWtl^©SIf«*^ 

^120, 130, 150©»f^fc^l©llli©^tRl5:*5Jt5t>©i:lnlC-C*>5d^. £*l 
[0092] J^T, SM^^lOO, 110, 140^£3i£llU— ^200— ©Tm^bMf 
[0093] i£M#^100, 110, 140{3\ &Mt^^'»^-^^£j£MlJ--^2 

OO^ffi-^dUll, 012, mi3<D*srif7B5) 0 i^m^— ^200tt\ W^rf—^ 

n^gfrrs^ ^(Dmi<Dm^m206\z^mmm(p, q, g, y)^a^u m 

<«m^-*(Gr, Yr, r) fc^K^ISfeliEWT*— * (Gd, d)i:Sr^b(011. 012 
, mi3^^ o B6),^M#S*100, 110, 140^Xib(p, q, g, Y) , (Gr, Yr, r 

), (Gd, cosragfrrsaaii, 012. 013^^x7^7) 0 &h#s«ioo, no, 



WO 2005/071878 



21 



PCT/JP2005/000532 



140fciU &m-y—^200frb(p, q, g, Y), (Gr, Yr, r), (Gd, d^^fTTS^ *r 

ti^tim^D-—^4oo, 4io, 440^, (p, q> g , y) tm^—^m^t^mm^ 

(gill, 012, H13<D^^°B100-1, B110-1, B140-l) o BSM§-1f— /^400, 
410, 440fci\ 4tPfffiMR(p, q, g, Y) t^^-^mMt^isir^t, ZrWetiZ: 
<D^2(D^^405, 415, 445^Mffif#(p, q, g, Y) £rA^L-Cfg2<Z)^m 
■7 s — $ (Gs, Ys, s)il2©IWf-^(Gu, u)i:^£]£U011, 012. 013 
OX^S^B 100-2, B110-2, B140-2), ^M#S^100, 110, 140^ (Gs, Y 
s, s)£(Gu, u)^Mffi-§(011, 012, 013O^^°B 100-3, B110-3, B 
140-3) 0 

[0094] ot, ^M^-^<Dmm^(Dmm(D^ibmi^mm(D^mtm^w^. &m 

if^KlOO, 110, l40?bKm*KmW1rZ o 
[0095] UM^i^MlOOn, mili^irX^K, ^KD^Wf— *(Gr, Yr, r), ||1<D^ 

mmn*f—*(G&, d), m2<Dmm^-^(Gs, y s , s )^7j?^2<D^mtEK-7 ? -^( 

Gu, u)&%mirZ>b, *(Dm^7 s -*i¥f$.^mi04\z.ttL,X^ &%m&At>vtc& 

MftWvii:, (Gr, Yr, r) , (Gd, d) , (Gs, Ys, s)RXfi(Gu, u)k&A£)U Bf-^b 
SUf-^E (vi) ^Bf^bliEBJ^-^ ( « , t) k&$YWirZ> C^y^B 100-4) o 
TIIDiO^KECOO^E (vi) t ( a , t) ££r§S!iEU— ^300^{f (^^"BlOO 
-6) Q WEI?— /^300te, (E(vi), (a, t), CIDi) ^*H-§fgflElJ— ^300<D*M 
S^^v^/V^ Sek^fft&L (^5/^B100-8) , (E (vi) , ( a , t) , CIDi) tSek 
b&®>m Ji )—^200\cmitir& (j^jy:7°B100-9) o 
[0096] ^M^MllOfe. 012^i"J:5^, ^KDM^f— ^(Gr, Yr, r), |gl<D^ 
mtiE0J^-^(Gd, d), J£2<D»|^-^(Gs, Ys, s)&X*n2<D$mffim i r-9 { 
Gu, u)£^{rr3i\ SM^i^A^Lfc&Ml^vii:, (Gr, Yr, r), (Gd, d), (G 
s, Ys, s)^7j?(Gu, udb&m^v*— ^ffr$#l£ll4^A^U m^it&M'T— ¥E 

(vi) m^tmmr-^ ( « , t) ^1+1^1-3 c^^°bi 10-4) 0 ^ut, 

^110«, (E(vi), (a, t), IIDi)^i-§Mp fc 3[B]tt^v ? ^/V^Sei^^L( 
^r^Bl 10-5) , (E (vi) , ( a , t) , IIDi) ^Sei^fgflElJ— ^300^{f (^ 
^7°B110-6) o ^BE^— /^300«:, Sei^(E(vi), (a, t), IIDi) {^-f-^IIDi(D 
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ielv x*&z>^b&mMis (^t^bi 10-7) x *:<DiE>m&^®L304iz. xmm 

(-^-r^*ii»J^-CIDi^#b(^^A110-8), (E(vi), (a, t), CIDi) 

ictt^zmmv—/*3oo<D&mmM7 s i?#frm& sek^ffr&u 10-9) 

, (Ei = E (vi) , ( a , t) , CIDi) £Sek^i£Ml*— ^200^5&ff « (Xrs^BllO 
-10) o 

[0097] &If#5Kl40te. |gi3l2^rj:5^ Ml^^m^-^(Gr, Yr, r),Il(Di 
mra^-^CGd, d), H2(Z5«t ? -^(Gs ) Ys, s)3t^2<0^«liEM9 f -^( 
Gu, u) Z&imlrZb, m^&AfiU£8tMft&nb(GT, Yr, r), (Gd, d), (Gs 
, Ys, s)^rj?(Gu, u)b&9ffir?—*i¥j&^mi44\zAj]U B^kS*?*— *E ( 
vi)tm^kmm^—#(a,t)t&^WirZ&iyZfB140-4) o ^L-X^ (E(vi), ( 
a, t), CIDi) ^1-5#aS^v^/V§^ SeiSr^L(^"7 t y^'B140-5), (E 
i = E(vi), (a, t), CIDi) bSeib&W£y— ^200 \Z.T&fat%> frTyTB 140-6) 

o 

[0098] j^_h^^^-^»^ft &x*<D%imx*hz> 0 mure, nmf-^(D^Hnum(D 

[0099] ^200{3\ fBtElJ— ^300^£> (Ei, ( a , t) , CIDi) £Sek££rg:ff -fZb 

, 4tMM^^fiE^202^J;«9Sek^(Ei, CIDi) te*H""3ME1f— ^300<D 

jEv\^^xh^b^mmi^(^T^B8-i),m^-ittm^m^207izx<o, e 

^20i^^L-CCiDi^^^$ttTv ^^bbcm\(D&m : &t3t 1 §itttfX\ xfcv ^b 

^IftfEU^^BlO-l) , *1B»gfi204U: (Ei, ( a , t) , CIDi) bSe 

kb&mm-rzbbh^ ^m^&m^-?^-x2oiiz.civifrmmffi^xhz>z.b 

MBSt5(^T^Bll-l) 0 £fc. ^200te, SM#^140, 150;^ 

(Ei, (a, t), CIDi)tSeii:^:ff1-5^ *3l»^^fiE^202^J;«9Sei^ ( 
Ei, (a, t), CIDi){ZMir%&m^i(DjE^^m%X&%^b&mmi^(XT^B8- 
2), Bf^btiE0J!^fiE^2O7^J:«9, RmiEV<fchtlfch<DX&%~b&MmV(X 
TyZfB9-2) , ^*g^^^— ^-<-^201^^bTCIDi^^$t^TV^§r^ 
^CIDi(DSM^^#itTV^V^^^^^b(^5/7°B10-2) , SMf-^ 
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|B^®204^(Ei, CIDd bSekb&fflgrt-ZbbhlZ, Wfc?&&&?—9'<—X2 

01 Kcmi&umffi&x&zz. b*mmirz> frTvzfBi 1-2) 0 

[oioo] ^m^-^ioo, no, lAOK^nmrni^t-nmrn-i, gtrnf—w 
^n^mm^tzM. nm^—^h^\t^tz.^mmm(v, q, g, y)£U!i<« 

^-^(Gr, Yr, r) , Jgl^mtiEK^-^ (Gd, d) ££r»$ifiEU— ^700<£>^ 
miiEP^^701^A^L. Jf!l<£>»l^-^ Jgl^^flEW^-^IEL^PTl 
fim(p, q. g, Y)^^{«$tLfct>(D^^9^^fiEbTt>J;V\ to, Bf^-xM 
00, 410, 440^^^{fbfc||2(^^m7 :r — ^(Gs, Ys, s) , ff^O^flEBJ!^— * ( 
Gu, u)toV^, ^M^tiEi^— /^700(D^m^liE^701f3:«J:«9^^ 
ff#6(p, q, g, Y)fabjEL<ftm£tifc^m*b*5fr&&mVX-b£\\ 

[oioi] ^M««9^»^a^ov^^, mi^mm<D^mcom^-bm\^xh^(DX\ ^ 
xm%m%^m~tz> 0 

[0102] ^IIW^(Dg{I^:^OV^-CfjfcPJi-§ 0 

[0103] ^mmnmx^^m^iQMioo, no, i4o^^tvBt^-^#^^i 

04, 114, 144£«X., ^200^Jj|l<D^¥l£206£li;i, Bf^- s<4 

00, 410, 440^;fX^;ixi§2(«^3M£405, 415, 445&mx.Z>^-bX\ i£lf# 

raaoo, no, i4oxnmm^mw^n^^bfj:<, ^i^nm^—?^^ 

tir^ff#$tv6fcfe, ^200^>Bf ^—^400, 410, 440te, 

, ^^M^-^^W»SMrt^^o^^^f*-e^^v\ to, Hf-^- 

^-^ffr&^l£l04, 114, 144K£V&ffc£tlZ>mWkmW7*--9t±, &M^i® 
M120, 130, 150<DB§-^^l£l24, 134, 154^^^Hf ^itUmf— ?b 

n^mmx^m^mx^ 0 to. nm^m^ioo, no, i4o^Bt-^-^ 
^#^104, n4, i44^m^tc^^m^bf^mw^ts:b^h^^^ 

[0104] to, SH^w^2OO^3Ht-r50i©3EiJ|-7 ? — Hio^miiEW^-^, *5J: 

Bf /^400, 410, 440£^f -r£|l2(D^^r— ^, ^©^MEW-?*— 
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fcfcoa^^SrflfetBT^So ^(Vttb. &H1t— ^200^BfW— ^400, 410, 4 

^©^JE^Ifc-rSo £.*U£«W, ^200, B§ ^400, 4 

10, 440W^HfT&£Wit1-5££as-e£5 o 
[0105] «^3©HJfe^«» 

/^400, 410, 440<D#Bf^f[^J£401, 411, Mlfcft&X^tl^tlfflfitttft 
W§rtt&8t402, 412, 4425rKtj\ Bf-^iEK^tEi?— ^^600^f*Bf^bliEK^ 
|iE^601iSBt^t:liEM^|IE^602^^ttfc^(D-e^ o 
[0106] fiEM#^Bt-^^^205«, Bf^^lS^Y^tp^P^tffB^^^-^^ 
A^irU Y^J;«9v^Bf ^bbfcE(v)i:, E(v) tf^fcJ#v&jEL<ll£^fbUfc;:i:«r 
^tEK-r— ?v?b$:MJj1rZ> 0 mmU^nm ^b^402, 412, 442E\ Bf^b 
2rW«Y*r£tr BBtff *M r -^E (v) ££A^ tU Y\zxm (v) ^iMBf^ 
ffcUfcE' (v)fc, E' (v)^Yt-J:«9E(v)^iEL<MBt^bb^^^i-SE0j!^- 

[0107] Bt^bSEB^^fiE^eOlf*, Bf^b^MltY^tf^^ff^t^^-^vtBf 
^-T 2 — ^E (v) tmm<T—#wt&A£)bU E (v) ^ Y ^J;«9v^iEL<Bt^t:L^(D 

mtm^?-*E (v) ^e ( v ) ^n&m^tL-ttE' m mm 1 ?-*™ t&Ajjtu 

E' (v) ^Ylcij:«9E (v) &ms<m^4KUt$><Dfr}? 5ib*&ikffifZo 

[0108] #fF^cmi iz-^thtz.&m&m v ^*§£\ w^^^^mam., 'jmmm. ( 
^m^-r& 0 e (vo rt (gi, vo t\ ^mxmzti, 

(Gi, Vi) = (g"r mod p, viXY'r mod p) 
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[0109] mmw^m^b^&205t-z, ^mmmv, q, g , Y)tm^mmr-^^i) 
= (Gi, vi)t&A±)tu ^iknm*?—w (vi) tmrn^-fw' t&m±jirz> 0 e 
' (vi)^(G'i, v'i)t\,^mxm&ti. 

(G'i, V'i) = (Gfs mod p, ViXY's mod p) 
(DntWKXoXnbtiZo ^X\ sfe¥X&M^—?ynKtt^xmi¥mz.mAstd%L 

[ono] w^^tmrnm^^eom, vit (p, q, g , y) (vo = (gi, vo twt&Atsti, 

Gi = g w mod p, 
Vi=vi X Y"w mod p 

[oni] nm^ikmwtkm^gz602^ (Gi, vdbip, q, g , Y)i:E' (vi) = (G'i, v'i)b 
wb&AtlbU 

G'i=Gi~w' mod p, 
V'i=ViXY~w' mod p 

cDm^m^thf&y&xitmm&fakw-mtu b^h^-^x^m^m^ 
tcmfthmm^AEbmmir^ 
[oii2] m^, ^mmftm<Dm%m+&m^^<Dmtic^\^xmmirz> 0 hi6-hi 
*weth, i^m#*^ioo, no, i4ox(D^m(Rmtih(D^m^^x 

, mim, &m^ttt?m*bfflmfcm^ir%ftMtix<Dmm&nwvx\^ 0 
, ^mm^mx(D^mmmm(Dmm^mi(Dmmmm±m^xm, nm^ 
s^i2o, 130, i50(Dmfthmi<vmM<DKmfc&tf%h<Dbmx^xfo%frh, ~n 

[0113] £IT. &M^Mioo, no, 140^J;^^M^^^200— (DTt^frhnmf 
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[oii4] ^m^s^ioo, no, i4o«, ®tmy—^2ooKttu m^&mmm^M&m 

205t£j;»9, -T-<T(D^M^vj^oVNT,vj^^ff#(p, q, g, Y)Xm^tl^X 
E(vj)3rffr&U -?:<^E(vj)^vj3r(p, q , g , Y)K£QlEV<m-%4kVtci>(D-VtbZZb 
(DUWr— ^wj£ffr£Ullll7 % 018. E|19(D^5/7 0 C6), 2HMHf3ft(p, q, g, Y 
)fc(vj, E(vj), wj)COy^hi:^M#**100, 110, 140^ffi-§(|gi6, El 17 
, g|18C0^^C7) o 

[0115] Bf^— /^400, 410, 440«, ^#S^^E (vi) ^Hflff # (p, q, g, 

Y)t^mi~^ tti^timmH%nm^^402, 412, 442^e(vo^(p, q , 

g, Y)^A^UE(vi)^SSBf^bU7tE' (vi)^E(vi)^^(p, q, g, Y) {^«9lEb 
<Rf-^kUfc^(DiiEK^r— ^w'i^ffrr£L(016, 017, H18<D^5/^°C100- 
1, CI 10-1, C 140-1 ), 100, 110, 140JCE' (vi) bw ib&M\t 

(016, 017. 018(D^5/7°ClOO-2, CI 10-2, C140-2) o 

[0116] ]&±&&M^—#<Dmm^<Dtim<D5-h. $$i<DmMBmb&t£zmt~ehz> 0 

[0117] ^iK. 019O^n-^--Y— h^#MU SMS#itm^SM#^^a^oV>Ttfe 
[oils] ^m^S^ioo, 110, i40KX^M^n^f^M^n,^MT-^(D^n 

^^teofcfL SMf— ^200;0^fl L7>4»ft#R(p, q, g, Y)£(vj, E(vj), w 
i)<DV*bb, Bf^-f— ^^ffUh(E' (vi), w'i)<bE(vi)^Bf-^|iE0J!^BEi^— 
^^600^^fi-^(^^C15) o Bf-^ra^|iEi^w^600^,^PflttlB(p ) q, g 

, Y)Mvj, E(vj), wj)(Dvxhb&^mmtkm^moiKA£iu t^t©E(v 

j)#Vj£(p, q, g, Y)^J;«9lEb<Bf^t:$tL-CV^^5^^^liEb(^5/7 c, C16) 
, $£>fcl, (E' (vi), E(vi), w')^SBf^b^liE^602^A^U E' (vi)^E(vi) 
3r(p, q, g, Y)^J;^IEL<MBf^bb^^^5^^HiEL(^^ 0 C17)^fiE 

^^m^j-r^ (^■7 t y7 p ci8)„ 

[0119] ^Jfe7^^^^oV>TUiMi-5„ 

[0120] *H»S-e^, ^^w^200^|iEK##Bt-^>fb^205?r#x., t£M^ 
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^^(vj, E(vj), vn)v>vxh&mfc£ti. m^tum^u^eoiKxmwi)^ 

s*200&w&i^{kUti><Dk&vX(vi, E(v'j), w)^M#**^^fabrt^- 

[0121] *fc. ^400, 410, 440tttl^tlffiffltt% : ftV&-%'^gL402, 412, 44 

2^#x., ^M#s^i-«E' (vo, e(vo, w'M^, m^^mmm^msteo 

2{Z.Xm' (vi)^E(vi)^(p, q, g, Y)iZ£VJEL<m^k\J£h<Dfr¥5fr&fem"? 
Bff#^— ^jfiSEC^SrSSBf^bLfe^tfto-rE' (v), E(vi), w'Sr 

io, 440^(D^iEfT^£jrpiti-5^£^~e#5o 

[0122] fc^r-CfrJu Bf^bfiEK^iE^601^iJ(Dih— /^(Bf-^fiE0j!^|iEi^— /^600 
[0123] <<|f4cD||«tg>> 

^mm^m^mmnmic^^xmm^mm^xmmi-^o mi^mmm 

fdb<DX3b% 0 

[0124] m20l&\JtM4<nMM&te<oM&n^WRtt^J*ft. mi^B^tiftMKom 

mMm<Du^wm^^Mz.^\^x, k^2j^_h(D»^bT, wmmmMiooi^k. 

^(DBf^-f— /^400-1-400-k^^b, IH^^^M^^HO, 1407)^tb^ 
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tlVfr&V— ^410-1 — 410-k, w^440-l— 440-k^^$^i:5 t-L 

^(D-efc§ 0 #Bf^— ^400-1— 400-k, 410-1— 410-k, 440-1— 440-k 
Kit, ^frl^rfrl, SBf-^S^I£401-l- 401-k, 411-1— 41 1-k, 441-1—441 
-\d)mZ-htlX\^ 0 Wm^^MlOO, 110, 120, 130, 140, 150, UM^— <*2 
00&Tmf£^— ^300tf>*/*m. Ell^^L7t||l(D^W^^^i^IC-e^ 

o 

[0125] JfciC, ^Ji^(DE^m^M^^A(Dll]#lcloV>T|^Ki-§o 021-02 

3fe^n^n, sm#«^ioo, no, i4o-e©Mi (i^^t©sst 
^#^120, i3o, i5o<Dmi^mi<vmM<DKmK&tf&h<Dbm\^-?fo%frh 

[0126] OT, i£H«^100, 110, 140^i§S^w^200^(DT^-fe^^SM^ 

[0127] ^m#s^ioo, no, i40{i, i&m^—^oo^^&mmm^zmm-rz) 

(021, 022, 023CD^7"^A5-1) O SlUIJ— ^200te, Bf^NSMftf^^&r 
mt-t^t, -?:<DBf ^fc^I£203^J;«9, i^TOilM^&vjKlo^T, yjSr^Mff 
ffc(p, q, g, Y)-eBt^bLTE(vj)^j^b(021, 022, 023(D^^°A6) , ^ 
BBfi#(p, q, g, Y)£(vj, E(vj))(Dy^h^^M#S^100, 110, 140^Mffi~ 
£(021, 022, 023(D^^A7-1) O J£M#i^l00, 110, 140J3, (p, q, g 

, Y)Mvj, K(vi))cov^ht^mi-^>t^com^mmioi, m, i4i^*5v>-c V j 
(Dv^b&i&m^m^u &m^feA±>mmio2, 112, i42^«9 V j(Z)y^^^ 

^M#viSrjl^UTA^i~5(021, 022, 023CO^5/7°A1OO-1, A110-1, 
A140-l) o 

[0128] ^LT, &M#S*100, 110, 140^, vi^^i-^Bf^— ^E(vi)^litf 
m(p, q, g, Y) ^1# g (DBf^-f— ^400-1, 410-1, 440-1 t^ff « (021 
, 022, 023(D^5/^°D1O1-1, Dlll-1, D141-l) c Bt^-f-w^400-l, 41 
0-1, 440-1 te:, bfcBf^-^E(vi)^^ft#(p, q, g, Y) ^SBf^ffc 
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3^401-1, 410-1, 440-1 ^A^L-CE(vi)^SSBf^bLfcE'l(vi)^ff#L 
(021, H23<D^5/^D101-2, Dlll-2, D141-2) , E' 1 (vi) 

S^lOO, 110, 140^3Mff-f-§(E|21, 022, El23(D^5/^D101-3, Dlll- 
3, D141-3) 0 #ct^ SM#^*100, 110, 140te, 1# g (DBf^wMOO-1, 
410-1, 440-1 ^^#7tE'l(vi)^r2#g(DBf-^i^wMOO-2, 410-2, 440-2 

Kn^xmm-r^tK^, e' i (vo^t^-mst ^b^TE'2(vi)^#^> 0 

, ^<Z)J;5^Mffi^kf@C0Bt^-f— /MOO-l— 400-k, 410-1— 410-k, 440-1— 
440-k(^i-^<T^oV>-C^'9MU Bf^-x— ^E'k(vi)^#^(IH21, ®22, 023 
<D^^°D10k-3, Dllk-3, D14k-3) 0 Bf #-7*— ^E'k(vi) ^E(vi)^ktU^t) 

f^xnm^ki^ti^—^amirZo ^m#S*ioo, 110, 140^, E'k(vi)^ 

lit- /^300^Mi^— /^200— MSBf^— ^E' (vi)^-r§(g|21 N EI22, 
g|23(D^^7°D100-6, D110-5, D140-5) o £X\&<D%kmfe, ^lCOMMMM 

[0129] m^. ^mmnm<Dm^K^^xmmir^ 0 

[oi3o] ^mmnmxi^ sm#«*ioo, ho, 140^, zrivetb^ Bt-^u— ^400-1 

— 400-k, Bf^-f— ^410-1 — 410-k, Bf^-i^— /^440-l— 440-k^^^$^ 
, i£M#S^100, 110, 140^, t£Mf— ^^200^^^:ffL7tBt^— ^E(vi)£r 
-a-ffktU^^oTSBf^-^UT#^§E' (vi)^M^^^200^^ o ^r<D7t 

[0131] )fc:j8 % r.^-Ctt, SSf#JS^100, 110, 140(31^$tt^Bt^w^<Di@^VN 
Jgl(D^«ll£|l?)CC V><o^(DSM#«^VN<o^^Bf^-^^Jfcffii-5 
[0132] £fc, Bll5^^$^fc^3(Z)^W^||(Z)^^^)#^, #Bf ^iJ-w^UfctBEKtt 
[0133] <(^5(D^»^» 
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[0134] m24K^tzLm5<D%MKZM(DU&n,^nm^^TM-i, mioK^ihtz.m2<D 

^f^Bf^-f— ^^410-1—4 10-k, Bf^-i^— /M40-1— 440-k^Sgc$^J;5^ 
b7t:t(D-efc5o ^Bf^lJ— ^400-1— 400-k, 410-1— 410-k, 440-1—440 
-k^te, ^fl^fl, H2(D^#^^405-1— 405-k, 415-1— 415-k, 445-1— 
445-k^^.^ttTV^ 0 mtel^m^k-e£>5^#:£L-C, m# g (DBf ^40 
0-m, 410-m, 440-m<D||2cDg£^^|S405-m, 415-m, 445-mte:, H2<Dg£ 
if-^(Gsm, Ysm, sm) hW.^^^kWR"? ~ $ (Gum, um)^^i-§ 0 
T\ 

(Gsm, Ysm, sm) = (g sm mod p, Y sm mod p, sm) , 
(Gum, um) = (g um mod p, um) 

[0135] i£M«^a00, 110, 140<DBt^-^{^^104, 114, 144te, 

/^^©H©^tf- ^(Gr, Yr, r) = (g'r mod p, Y r mop p, r)10ll 
(D^j&mmv*— ^(Gd, d) = (g r mod p, d) k{@<DBf^-f— /^£><Dkf@(D 
%2(D^.Wf— ^(Gsl, Ysl, si) — (Gsk, Ysk, sk)^7j?kfi|(D^2(Z)^^|iE0^^ 
— ^(Gul, ul)-(Guk, uk)£, ¥^&Ml^vi^Aij£tv5^ TfE*U-Uc 
^oT, Bf^bSM^-^E(vi)^|+#i-5o 

[0136] E (vi) = (Gi, Vi) 

= (GrXGslXGs2X---XGsk mod p, viX YrX Ysl X Ys2 X ••• X Ys 
k mod p) 

^ffr&^l£l04, 114, 144f*. 
a=GuXGdlXGd2X-XGdk mod p, 
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c = HASH(p, q, g, Y, Gi, Vi, a), 

t=cX (r + sl + s2H hsk)+u + dl+d2H hdk mod q 

[0137] Z.<Dmmfe, m^kffl&tiffifc£8t207\Z£*), 
c = HASH(p, q, g, Y, Gi, Vi, a) 
-Srtf^ET, 
g'tX Gi {— c} —a mod p 

[0138] &3b\ i£M#2«120, 130, 150, &MV—/*200mmffifr— ^300tf)fflM& 

[0139] #cic, *mM&1fc(Dm&M+&Mi/xT&<DW}mz^^XffiW1rZ> 0 025-02 

7tt, *T*ve*K &M#S^100, 110, 140W^(&tWvk©fi3N^^ 

M#«^120, 130, 150<Dm<PbM2(DmM<D&Mfc&tf%h<Dbm^X*&Z>fatb 
[0140] J^T, SM^S^lOO, 110, 140l££Z>®imy— >*200^<E>T*-fc*}&»£>18*7* 

[0141] &g&gffiMlOO, 110, 140te, /^200— <n>Wfef— *ifcfc££Sfrr5 ( 

025, 026, ®27(D^5/7°B5) 0 t£MU— /^200te, 38*5*— *S3ft<5r^ft *T5 

mi(Dmm^206\c^mmm(p, q, g, y)sta^u #i®&ife^-*(Gr, 

Yr, rJ^KD^tEK-X—^CGd, d)££ffr&U025, 026, 027(D^^B 
6), ^M^^lOO, 110, 140^, (p, q, g, Y), (Gr, Yr, r) , (Gd, dO^Minir 
5(025, 026, 027(Z)^^°B7) O g£H#$S&7fcl00, 110, 140}*, ^ 
200/5^ (p, q, g, Y), (Gr, Yr, r) , (Gd, d)^ffi~5^, Bt^w<C 
400-1, 410-1, 440-1 K(p, q, g, Y) £38*7*— ^Mt^im 1~Z> (025, 0 

26, 027(D^^°E1O1-1, Elll-1, E141-l) 0 fflMHf— >^400-l, 410-1 
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, 440-1 fa, temmmip, q, &, Y)tmmf-^^t^mir^t, ztveti, m 

2<D&&&8L405-1, 415-1, 445-1 ^(p, q, g, Y)^A^bT, W,2(T)W^f— 
*(Gsl, Ysl, si) bW2(&m&M.m'f— ^(Gul, ul) b&£.J$L 026, 0 
27<DX^yZfE101-2, Elll-2, E141-2) „ SM#i^lOO, 110, 140^, (G 
si, Ysl, sl)£(Gul, ul)b&MimirZ)(m25, 026, 027 CO 7^101-3, 
Elll-3, E141-3)„ Jfcfc, &M#S^100, 110, 140J3, 2# S OBf^—^4 
00-1, 410-1, 440-lfc^LTl^I^S&tft«3aBU ^TNtiat, MHI<DB# 
iJ-w^400-l— 400-k, 410-1— 410-k, 440-1 — 440-kOi~-<-C V ^X^ 
«9MU kf@(Z)||2(D^i^7 :? — ^(Gsl, Ysl, si) — (Gsk, Ysk, sk) bkBC0^2C0M 
&ffiffl7 t —&(Gul, ul) — (Guk, uk)££r#5(025, 026, 027(D^r^:7 o ElO 
k-3, Ellk-3, E14k-3*-e) 0 
[0142] m^X&m&l&MlOO, HO, 140«, UM^AjjVfcvib, ^l©ftf-^( 
Gr, Yr, r) , ^lO^M?^— *(Gd, d), ldB©^2©^ife"9*— ^(Gsl, Ysl, s 
1) — (Gsk, Ysk, sk) RTMmCD^O^&Umf—? (Gul, ul) — (Guk, uk) £ 

^^#S104, 114, 144^A^U Bt#>fb&3^— *E (vi) £Bf 
AsKEWy*— :?(a, t) ^1+^-3(025, 026, 027<Z)^7"^ o ElOO-4, El 10- 

4, Ei40-4) o r^y^©^as, m2CDmMMMcDm&bmmx&% 0 

[0143] JJcld, ^JS7^«S<D^^oV>TtftWi-5„ 

[0144] *H»|g-e«, ^M#S*100, 110, 140M, ^tl^tl^ Rf#U— -^400-1 
— 400-k, Bf-^Hf— /M10-1— 410-k, B§ ^HJ— ^440-1 — 440-k/^j^£tL 
, i£M#3«100, 110, 140te, Sai"9-w^200d^^ Ufc&l©£ifc5*— 
k^OBf^w^d^^ Lfckj@(D^2(Z)^^-^^ £«9Bf-^-^E (vi) Srf^ 

j£U rconf^— ^E(vi)^^— ^200fc3!5o ^cotcbb, ®tmy—/<bkm 
(DBf^w^i-^r^KUei^, E' (vi)d>M 2 :fc©&Slrt#vij&s#JW't-3r: 

[0145] rrrii, ^M#S*100, 110, 140lJI^$tbSBf ^w^<Dj@^V> 
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[0146] mmv—^2oo\mi<Dmm^m&mx.t&mf$.tu km&m&v—'*** 
(vo m$^mmm*f—z ( « , t) sr^*r«^^^b-cfc«tv \ &n 

#i«100, 110, i40Sr^«>i-^-c©Ssi#«S*ttl^^— ^OO^ip-ftSi* 

, q, g , Y)t®ffi&mm&mmirz> 0 &jR#raaoo, no, i4o<nm^<r—?ft 

$c^I£l04, 114, 144}2 X \sM<K%i2(D^$rT— ^(Gsl, Ysl, si) — (Gsk, Ysk 

, sk)^Tj?k^o^2(D^^|iEK-7 2 — *(Gdi, dl) — (Gdk, dk)^J;<9, TfB(DJ:5 

[0147] E(vi) = (Gi, Vi) 

= (GslXGs2X-XGsk mod p, viX Ysl X Ys2X ---Ysk mod p) 

> 

a =GdlXGd2X---Gdk mod p, 

c = HASH(p, q, g, Y, Gi, Vi, a), 

t = cX (sl + s2 + ---sk) +dl+d2---dk mod q 

[0148] ^5b\ g-m-y—^n. m^M^f—^, mi^m^mf— 

[0149] j^_h, ^mmmm^^mmmmic^^xmrnvt'^K ±.^tcm%m^-&m 

b-Ca^tra— ^ij:^j&*Jx5o m*t*i,fi, 193^-—^ lit 
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[oi5o] mz. &^ffittm&ttfztb<D=*^=.~#tL,x^ ^—?%mmt}t^yh 

[0151] *3£Ki3\ *s/H7— ^^^L^E^m^M^^Ai:V>5ffl^i-3gffi-e^ 
[0152] [Hl]«0J(D^l(D^0j!^(DE^m^^M^^AcD*^^i-^n^^|l|-efe 

So 

mzmi(Dmmnmj^n^m^^ioo(Dmi¥^ir^ti—^--hxh^ 0 
m^mi<Dmmnm^n^m^^iio(Dmi¥^iryti—^—hxh^ 0 
m5mi^mmnm^n^m^^i20(Dmi^^ir^ti-^-hxh^ o 
m6]mi(Dmm^m^n^M^^i30(Dmi^^ir^a--^--hxh^o 

m9]mi<Dmmnm^if^m^-^2oo(Dmi¥^iryu--^-~hxh^o 
mio^mm<Dm2(Dmm^m(D^m^M^^<Dm^^ir^u^mx 

mnM2<Dmm^mK^n^m^m^ioo(Dmi^^i-^-^-hxh^o 
vmmm2(Dmm^mK^n^nm^m^iio(Dm\^^yri-^-Yx^ 0 
vmmm2(Dmm^m\^n^nm^m^i40(Dm\^^y^-^-Yx^ o 
mwm2(Dmm^m^n^M^—^2oo(Dmi¥^i-^^—^- j r—bxh^o 

[®i5]«0^(D||3(D||^m^(DE^m^M^^»«^^i-^^^li|-e 



WO 2005/071878 



35 



PCT/JP2005/000532 



m28mM<Dm&mi L &mi/xTJ*<DMf&&^iry*ti^m-t:&Z) 0 
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m^mm 

100, 110, 140) 

^mmf-?&, mm^itmm^^mm^t^mwm^m^ioo, no, 

140) Kwm^yYV— ^S-eMifi-§^<^10(DBf^-f— /^(400, 410, 4 
40) 

itfffB&M#S*(lOO, 110, 140) ^hm^ri^M^—^^mU m&mUz 

h^fiffE^h^-^S-e^lff -T^SMf-^^ (200) 
ittffB&Jgf— (200) ^i^^ff bfcttflE^^Bf^bi^M-r-^^y^h^m-^ 

-fZm^y—^ (500) 

ftjfB&ICU— (200) te\ jtrifEtg-^y— ^ (500) ^^BUfB^^^M^ y^h 
Sr^ff U ^Sff L7c#IM#£ y^h^^^v ^X^MW^^Mfiir^t^Wmtir 

(124, 134, 154)^-r^lJ»SM#S^(120, 130, 150) If M 

III ^fBfc^E^ t^-SI^T^ 

[3] m^^th^m^xn^m^M<Dmmm^v^ht^xmmir^ 
mmmm&iiu mm&m^^uoo, no, 120, i3o)^hmm^it^mf 

Hf ^b^M^-^^rW-r^BliEi^— (300) SrH^H*., ffffB&HU— ^ (200 

^mmmwm^^M^—^tvxm^.mMmixn2Kmm(D^m^ 
[4] mm)— s< (300) &mz.mx.x $319, 
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masm&mjziiio, 130) tt, ffrtEBf^b^M^-^^, £af$F*3s»hf#^ 

m^rt^V^/V^ ^4)lt5»rt^ £j&#J£ (1 1 3, 

133) ^fU 

iiiffBiEfiElJ--^(300)te, tflfE^M^^dlO, 130)^^#frfEBt^^M^ 

mmum-v— * (200) ^/cK<^fufEi»?—^ 000) ^j;«9^iEft#^# 
^p$^fc^^b^M^^^Btife^^Bf^b^M^^^bT^^s,M^iii 

-f-%im<D$H^-y— (400-1— 400-k, 410-1— 410-k N 440-1 —440-k) 
-a"^, MfBSMf— /^(200) }3\ g^l^^Bf-^-f— (400-1 -400-k, 410-1 

-4io-k, 440-1 -44o-k) x^mic^^titz.m^t^m^— *&%tm -rz> 

BtffEHf^-f- —a* (400, 410, 440) te, iii|fEBt^b&M^^-#n;iT, ^Bf^- 

^^M^-^^jE^tt^i-itEK^-^^^bT, mm^m^^Maoo, no 

, 140) {djgff ft^iIlX«2^fE<cOg^m^M^^o 
[7] ^yYV— WcmWctS fit' &m^$&M (100, 110, 140) 

^|flff^^tiffESM#^(lOO, 110, 140)fe^lBf^^^-^^^ 
i-§mi^-«#^(206)^U MIE^lBt^^-^«fESM^ffi*( 
100, 110, 140)^mi-5mi^Bf^^^(200)^, 

mm^mmm^mm&m^Miioo, no, 140)^^112^^^^-^^ 

^i-§^2^— ^^I£(405, 415, 445) ^fTU fi|fEjf§2llt^fb^^— * 
^ffrfE^M#^(100, 110, 140)^^ffi-^^2(DBt^w^(400, 410, 44 

BfffEKM^^dOO, 110, 140)7>ibBf^&M^-^^fU Bl^ffLfc 
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h^tfflE^h!7-^S-e^ff -r5fi»9— (200) 

&-?mm •tzm^-f—'* (500 

ffJfB&lllJ— ^ (200) f3\ MfBtfi-^U— ^ (500) d^ttf|B¥^C^^M#^ P^h 

tiifBSM#^(ioo, no, 140) &mft^&mmmiRx?m2^fc/<7* 

— ^^S^V^-CBt^-^L-CBt^SM^-^^^-r^Bt^-^^(104 ( 114, 1 

44) mm^k&mT-?&mmmy--^ (200) raft -rs^ t^mmt 
M mmmi^^— ^ (200) ^tBsm*— ^ (200) t^m— ^_h-e^ 
[9] mm&m^m^ (100, 1 10, 140) « % ttfiEBt^^M^-^i^p^-c, b§-^ 

i£W^-*£ffr£LT^lS:IS^-^ (200) liMU 

mlfB^Mf— ^(200) E\ />^<^ti|?BBt^biiE0J-x--^^fiEUTE^tt^ 
^fiEbfcm^, ^i-§Bf^b^M^-^^fi)fB^^Bt^b^M^--^^bT^ 
#>3, ft^il7Xtt8^fB«<Z)E^m^^^A 0 

[10] m^^^n.m^x^m^M<Dmmm^v^vt^xmmir^ 
mmmm^u mm&m^M (100) ^^ttfiBBt^bi^M^-^^ms'Jit^ 

3rSff U ttflE|BH^®^|Eti$^cTOff #(3lS<5v ^itfjfBBf-^&JII^-^ 
^mtiEi-§^fiEi^w^(300)^j£^'(lx., itufBi£lllJ--^(200m, 'J?te<£btft 

sbmeu— ^ (300) ^^^mtEft^^^p^^Bf ^tum'r—p&ffim^w* 

[11] ^(300)SrSi-'Hx.T*5«9, 

BfffE&M#«*(110)te, ffffBBt^-^^-^^, m»S»l*», 

t^s<5v vr\ ■mm^f^f^^ ^^-r^sm^m-^ ^^(113) srwu 
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mm^m-v— (200) fa, {±>f£<thifrimmmy-— ^ ooo ^i«9miiEft$R^# 

[12] ^M^-^mmm^M^mtc^^M^^t^^-^tm^-^t 

tifiBfiaf -9— ^ (200) i>*^ &m^k^xm$#% twmm^ &m 
^ki,tcm^kmw#%b<Dm<Dyxh&um#iffiMaoo, no, l^izmm-rz 

mtmm^^doo, no, i4o)^h, um^^mm^tcmw^tmt^otc 
^itimm^mmm^-^(4oo, 4io, 440) rafrrsi^, 

ffflEBt^— ^(400, 410, 440) -C\ ffffEBt^^M^^SSBf^^bTBt 

^tufc^^M^^doo, no, 140) Kstfrrs^pg^ 

ffrfB^M#^(100, 110, 140) — (400, 410, 440) 

LfeBt#>fbi9:si7 f ~^SrtifiBfiai^w^ (200) ^Mft irzmmt, 
mmu^—^ (500) -e, ttfiBBt^b^M^-^<^y^h^«-^b-cjiR^^Ati 

[13] BfrfB^M#«^ (100) ^^BtflEBf^k^M^-^^^liS'Jtt^^BiE^-^^ (3 

oo) x^mu mmmm^mm^titc.mmmicm<5\ ^xmrn^mmr-? 
^mmvmmum^-— ^uoo) Kmm ~tz>wmt. wmnm^—^(2oo)x\ 



WO 2005/071878 40 PCT/JP2005/000532 

[i4] tffiEi^M^s^dio) x\ mmm^k&MT-fb, mm^mmmt, mmm 

mffifr— ^(220)t, tfrfBSM^*(iio)^^tfrfBBt-^-^SM^-^i, M 

mmi^M^— ^(200)T\ ^<^BiffBMi^-/^(300) ^J;(9MEf# #^{^t 
TJP^nfc^^bSM^^^mffB^^Bt^k^M^-^^bT^^^^I^^^S 

[is] Mtm^km^£&nmm^k'tz>&mt)K m^m^-^ (400-1-400 

-k, 410-1— 410-k, 440-1— 440-0k)TBiffBHt^kf^M^^)lB^^#M^ 
Bf^bLT^|BllS^klg^-^^^i-SSP&Tfc5,|»^12tc|Eife(DE^ 

[i6] striBy^M^*h,s#m^^r^ N mm^Rxfm^mm^ km%.x^ m 

fi|fBBt^-f---.^(400,410, 440) tf*. ff|fBBt^b^M^-^^4t^^Bt^b^ 

mr-?<DjEm&&^i-mmT-?&i / Ej&i,x, mmum^Maoo, no, 14 

o) iziMim f««l2t-fB«(DE^m^M^&o 

[17] HKDHf^— /^(200)T\^|BttlB7)^ti|fBSM^^(100, 110, 140)fe 
^||l^^^-^^L,f^||lBf-^/^--^SM^*(100, 110, 1 

40) raft -rzmn^ 

M2(Dm ^—^(400, 410, 440) T\ ffffB^tf ^^ff)fBSM#^(100 

, no, i4o)mzM2m^k^9?t~?&3i)$u mm2^^ks<^—?%mm®: 
m#^(ioo, no, 140) Kmrn -rzgmt. 
mifBSM#s^(ioo, no, i4o)T\ nm^<nnmfom%mmmim$m2^ 

-^wm^—^ (200) Kmrn-Tzmmt, 
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tstmy-—'* (200) ~e, utm^t^mf— ^<D^mwm^i\^M"f— 
m^-^ (500) x\ mm&m-y— ^ (200) ^b^m^mm^m^m^m 

tm&my— ^(2oo)-c\ tfftETO^^*#^y^h^ff iisft 

[is] ftrfBBt^b^M^-^^«i-^^l^^, tuSBBf ^k^M^-^OlE^tt^fiE 
BtffB^Mf—/^ (200) ^^<^HtflBHf^t:tEK^-^^|iELTIE^tt^ 

[19] ibjeij— ^ (300) -c, mm^m^M (100) ^^tfrfBBt-^^^M^-^^^m 

filfB^Mf-^^(200)-C\ ^<^BiffB^liEff fg^^P^^ 
fcBf^b^M^-^^mifBW^^Hf^b^M^-^^bT^^S^|®^^M^#^ 

[20] tffiEi^M#«* (1 10) ~c% mmm^tn.mr-^b, mmptmm nb. mmm 

mUmU-V-- (300) -C\ tfffE^M^* (1 10) ^^ttlfEBt-^^^MT 1 -^^, 

mmum-y— * (200) -c\ <pfj:<bhmmmmmm^miJu^nf^^tUMr- 
^mm^w^m^mM^-^b\.xm^^mb^m^m^mMmi7ic$d 
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^tt&SIOI 



A*l£g102 



103 



sum* no 



&^#**;*;120 



*;S2!IB121 



A*)£SS122 
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IS1IE3MS301 
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£f$3MS303 
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t132 
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201 
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5E»S£B204 
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[02] 



A1 
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SEl3^ffi204lZ 



A2 



4*MtiHR<p. q, «,Y)£ 
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[03] 



A6 



(vj, E(vj))<D'.J:*h£ffia 



A7-1 



[©m#4S*100] 



A5-1 



(vj, E(vj))<O l Mht 
(p, q. g,Y)£frj§ia 



A1 00-1 



A100-2 



[Bf^" 1 ? — M400] 
A100-3 



ViloffrST-SEO/i)*: 

<P. q, g.Y)^* 



A1 00-5 



Al 00-7 



IlDi<D!SiIE 



E(vi)£(p, q,g, Y)lCty 



IIDiCDlIgiE^* 



HDildsfj£T'£> 
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E'(vi)^SSI#im*^3l1§ 



E'(vi)£ 



Al 00-5 



Al 00-6 
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(E'Cvi), ClD\)\zn?Z> 



Al 00-9 



T 



(E'(vl), ODi)i:Sel</£ 



[EI4] 



[JSMtr-M] 



A6 



(vj, E(vj))CPU;*h£ffi% 



[lsm#s«miio] 



Bg^tan'if^gg^i^f 



A5-1 



A7-1 



(vj,E(vj))©U^ht 
(p, q, g, Y)££i§fg 



All 0-1 



Al 10-2 



I 



[Bg^tt^VH 0] 
A110-3 



Vilc^jET-SE(Vi)^: 

(p, q, g, Y)£% 
Bf^tf-MlCjUf 



All 0-7 



All 0-8 



ECvi)£(p, q,g, Y)lC«*y 
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A5-S 



vi£(p, q, ff , Y)lCcty 



I 



A1 20- 



A1 20- 



IIDiOtSiiE 




IIDiCDfgijEK* 


* 







i 






E(vi)£ 
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[07] 



A6 



(p. q. g. Y)TflS#fbUT 
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I 
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A140-1 
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